$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0/2744f7f5-ab18-3de3-b244-bc520f20d607.roa File: 2744f7f5-ab18-3de3-b244-bc520f20d607.roa (raw, json) Hash identifier: vBAxJ/GSllKt+SXnIeXhNQyEjpcDPpNhz2g7xg3YxOU= Subject key identifier: BB:41:EC:A4:4B:D9:7D:D3:A9:28:4F:08:C6:D3:15:15:1F:4D:C9:1F Certificate issuer: /CN=7c1b0964-bd9c-4931-a53d-e2a434bc2af0 Certificate serial: 010D0C9F4328584917DC327B8E9E1A2A147F7140 Authority key identifier: 66:6F:7E:8C:15:5F:8C:94:34:06:21:1B:FB:BC:4D:C1:6C:D8:85:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0/2744f7f5-ab18-3de3-b244-bc520f20d607.roa Signing time: Thu 06 Mar 2025 02:00:39 +0000 ROA not before: Thu 06 Mar 2025 02:00:39 +0000 ROA not after: Wed 04 Jun 2025 01:00:39 +0000 asID: 40230 IP address blocks: 2604:cf00::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0/7c1b0964-bd9c-4931-a53d-e2a434bc2af0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0/7c1b0964-bd9c-4931-a53d-e2a434bc2af0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:17:dc:32:7b:8e:9e:1a:2a:14:7f:71:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c1b0964-bd9c-4931-a53d-e2a434bc2af0 Validity Not Before: Mar 6 02:00:39 2025 GMT Not After : Jun 4 01:00:39 2025 GMT Subject: CN=9e34c0c6-991e-4af1-ae9f-d9ea557179ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:a3:df:e3:c1:34:ee:9c:68:fb:2e:a6:d2:75: 52:bd:22:e6:90:aa:e9:35:3f:a4:1a:e4:d7:14:83: 5f:0b:69:31:a0:9a:26:79:19:d3:1f:04:f5:82:42: c6:ac:a3:66:be:b0:15:60:7b:f9:e6:76:30:ef:21: 41:3b:a1:61:98:32:f2:1f:f7:b3:82:17:a3:f5:ee: e9:b9:89:bb:14:76:66:26:2d:51:56:67:a4:f0:75: 74:75:e6:ed:2a:ec:6f:ce:86:93:b2:a8:3e:f6:40: 05:e8:00:23:61:19:c8:89:ac:20:92:2d:06:2c:25: c4:41:4c:2a:53:a4:01:52:8b:82:87:d8:2f:c5:d0: 28:07:45:9c:3e:3d:e1:5b:79:21:0c:44:2f:14:5a: 6a:d4:37:1d:61:34:8a:89:1a:e6:2b:1e:a6:dd:2a: 5a:b9:9e:08:79:f5:08:c7:07:80:f0:b6:74:14:11: 98:3a:46:6f:12:27:e7:9c:f7:ee:7e:7f:2c:d3:a3: 1d:96:57:c8:94:d3:20:4a:83:47:3c:a8:62:f0:51: e6:bb:83:ac:27:9d:73:7d:c9:8d:15:9b:c4:8d:d2: dc:c9:6b:84:b9:0b:bc:f1:fc:40:f7:11:df:62:ee: 01:d5:27:ff:ea:ee:d0:60:b2:75:d2:1b:e1:00:89: 80:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:41:EC:A4:4B:D9:7D:D3:A9:28:4F:08:C6:D3:15:15:1F:4D:C9:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0/2744f7f5-ab18-3de3-b244-bc520f20d607.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0/7c1b0964-bd9c-4931-a53d-e2a434bc2af0.crl X509v3 Authority Key Identifier: keyid:66:6F:7E:8C:15:5F:8C:94:34:06:21:1B:FB:BC:4D:C1:6C:D8:85:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0.cer sbgp-ipAddrBlock: critical IPv6: 2604:cf00::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:82:b1:14:aa:7d:9a:ac:89:a7:b0:38:57:7f:cd:c1:2b:ef: aa:e7:66:e9:6b:ce:2a:75:da:f0:dd:40:21:08:16:b0:ba:e0: 49:49:69:d7:b1:2c:69:94:0e:31:b7:c7:62:a9:28:9a:f7:20: 2a:3a:22:d7:5d:f0:2f:35:1e:8e:58:4f:c8:b2:b6:6e:28:e8: aa:5b:33:fa:be:26:27:2e:26:26:29:c7:d3:fa:52:6f:e1:82: 29:6f:85:17:66:81:de:fa:55:4b:23:63:d4:5f:d6:ed:85:3d: c7:45:9c:12:95:21:0e:13:d8:9a:73:f2:41:94:98:5c:04:d2: b8:eb:48:e2:17:f1:14:08:39:3c:18:f7:a8:69:33:b6:3d:aa: 74:3f:27:60:b8:bf:8e:c4:f8:47:b5:bc:9d:f5:bc:e5:d1:38: d9:e3:76:46:0e:af:88:ad:b2:2b:b5:82:7e:cf:99:08:a4:94: 6c:e2:41:01:ed:a6:3e:17:ac:84:65:1f:e1:88:5b:3a:c3:f6: 73:5a:86:68:a5:8b:27:97:08:21:56:49:2c:6a:8c:f5:53:92: 0a:c2:a1:17:cc:f0:d6:d8:ad:fd:25:7e:0a:65:10:aa:09:fa: 9e:31:4b:52:1e:d7:df:75:61:c3:ea:31:6e:5d:b4:06:19:71: 6a:46:2f:01 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEkX3DJ7jp4aKhR/cUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2MxYjA5NjQtYmQ5Yy00OTMxLWE1M2QtZTJhNDM0YmMy YWYwMB4XDTI1MDMwNjAyMDAzOVoXDTI1MDYwNDAxMDAzOVowLzEtMCsGA1UEAxMk OWUzNGMwYzYtOTkxZS00YWYxLWFlOWYtZDllYTU1NzE3OWNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjaPf48E07pxo+y6m0nVSvSLmkKrpNT+kGuTX FINfC2kxoJomeRnTHwT1gkLGrKNmvrAVYHv55nYw7yFBO6FhmDLyH/ezghej9e7p uYm7FHZmJi1RVmek8HV0debtKuxvzoaTsqg+9kAF6AAjYRnIiawgki0GLCXEQUwq U6QBUouCh9gvxdAoB0WcPj3hW3khDEQvFFpq1DcdYTSKiRrmKx6m3SpauZ4IefUI xweA8LZ0FBGYOkZvEifnnPfufn8s06MdllfIlNMgSoNHPKhi8FHmu4OsJ51zfcmN FZvEjdLcyWuEuQu88fxA9xHfYu4B1Sf/6u7QYLJ10hvhAImAnQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLtB7KRL2X3TqShPCMbTFRUfTckfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83YzFi MDk2NC1iZDljLTQ5MzEtYTUzZC1lMmE0MzRiYzJhZjAvMjc0NGY3ZjUtYWIxOC0z ZGUzLWIyNDQtYmM1MjBmMjBkNjA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2MxYjA5NjQtYmQ5Yy00OTMxLWE1 M2QtZTJhNDM0YmMyYWYwLzdjMWIwOTY0LWJkOWMtNDkzMS1hNTNkLWUyYTQzNGJj MmFmMC5jcmwwHwYDVR0jBBgwFoAUZm9+jBVfjJQ0BiEb+7xNwWzYhYUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83YzFiMDk2NC1iZDljLTQ5MzEtYTUzZC1lMmE0 MzRiYzJhZjAuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgTPADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAigrEUqn2arImnsDhXf83BK++q52bpa84qddrw3UAhCBawuuBJSWnX sSxplA4xt8diqSia9yAqOiLXXfAvNR6OWE/IsrZuKOiqWzP6viYnLiYmKcfT+lJv 4YIpb4UXZoHe+lVLI2PUX9bthT3HRZwSlSEOE9iac/JBlJhcBNK460jiF/EUCDk8 GPeoaTO2Pap0PydguL+OxPhHtbyd9bzl0TjZ43ZGDq+IrbIrtYJ+z5kIpJRs4kEB 7aY+F6yEZR/hiFs6w/ZzWoZopYsnlwghVkksaoz1U5IKwqEXzPDW2K39JX4KZRCq CfqeMUtSHtffdWHD6jFuXbQGGXFqRi8B -----END CERTIFICATE-----Generated at Sat Apr 12 12:59:12 2025 by rpki-client